e08dfedc0393cb70831ed6947cf94657_JaffaCakes118

General

Target
e08dfedc0393cb70831ed6947cf94657_JaffaCakes118
Size 897KB
Sample240406-ks4lysfd87
SHA256 a146a444ecb385d878cd8a82d1a4be07afefa4ee2efbb5080f52b340d8dde57c
MD5 e08dfedc0393cb70831ed6947cf94657
SHA1 f8645da32e015bffc44616201765e50012d32d21
SHA512 f3cfd0cc25c475ca4c738e1705470ef44bb8fe2a173620cd577144515df37f84a93aa81f6ac266f8b931f9933e57cc33998e021a3952510fc31685808623647d
SSDEEP 12288:XN1Soga7qlD8Ad3BIK5rgOBueUWsuTHtF9QBX9a0khFIQpxILDXGGlET9n/cHG:X5UD8mG6rHBPbSYmiG8cH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e08dfedc0393cb70831ed6947cf94657_JaffaCakes118

File Explorer

e08dfedc0393cb70831ed6947cf94657_JaffaCakes118

.exe 897KB

e08dfedc0393cb70831ed6947cf94657_JaffaCakes118

IMPHASH 688914c09063324d2ce71db515e11995
SHA256 a146a444ecb385d878cd8a82d1a4be07afefa4ee2efbb5080f52b340d8dde57c
MD5 e08dfedc0393cb70831ed6947cf94657
SHA1 f8645da32e015bffc44616201765e50012d32d21
SHA512 f3cfd0cc25c475ca4c738e1705470ef44bb8fe2a173620cd577144515df37f84a93aa81f6ac266f8b931f9933e57cc33998e021a3952510fc31685808623647d
SSDEEP 12288:XN1Soga7qlD8Ad3BIK5rgOBueUWsuTHtF9QBX9a0khFIQpxILDXGGlET9n/cHG:X5UD8mG6rHBPbSYmiG8cH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

475248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\rugopoguvinan\vo.pdb

kernel32

ExitProcess GetEnvironmentVariableW FileTimeToDosDateTime CreateTimerQueue SearchPathW InterlockedDecrement AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW GetTickCount GenerateConsoleCtrlEvent SetFileShortNameW LoadLibraryW SetSystemTimeAdjustment GetModuleFileNameW CreateActCtxA CompareStringW lstrlenW GetStartupInfoW OpenMutexW FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW SearchPathA _hwrite OpenWaitableTimerA RegisterWaitForSingleObject OpenWaitableTimerW LocalAlloc SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW AddAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency FillConsoleOutputAttribute SetProcessShutdownParameters GetVersionExA DeleteFileW CloseHandle CreateFileW GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer GetModuleHandleW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetStringTypeW MultiByteToWideChar OutputDebugStringA WriteConsoleW WideCharToMultiByte LCMapStringW IsProcessorFeaturePresent RaiseException SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessagePos

Sharing

General

Malware Config

Signatures

File Explorer

e08dfedc0393cb70831ed6947cf94657_JaffaCakes118

kernel32

user32

generic